You are not logged in.

#1 2022-12-20 17:03:07

kayegui
Member
Registered: 2022-12-20
Posts: 17

[SOLVED] Newbie having iso verification issues

Hello Friends! 

I've downloaded the iso using torrent.  I've also downloaded the .sig file.

1. 
I run this command, sha256sum archlinux-2022.12.01-x86_64.iso , and the output is exactly the same as the one shown in https://archlinux.org/download/ , under Checksums.
This is good, correct?

2. 
I have in my directory, /home/kaye/Downloads , the following two files:
archlinux-2022.12.01-x86_64.iso
archlinux-2022.12.01-x86_64.iso.sig

I run this command:
gpg --keyserver-options auto-key-retrieve --verify archlinux-2022.12.01-x86_64.iso.sig

I get this output:

gpg: assuming signed data in 'archlinux-2022.12.01-x86_64.iso'
gpg: Signature made Fri 02 Dec 2022 12:40:26 AM PST
gpg:                using RSA key 4AA4767BBC9C4B1D18AE28B77F2D434B9741E8AC
gpg: Good signature from "Pierre Schmitz <pierre@archlinux.de>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 4AA4 767B BC9C 4B1D 18AE  28B7 7F2D 434B 9741 E8AC

Is this normal / sufficient? Because the WARNING....

3. 
Is it necessary to do anything else if the above two are good?  Because I don't know how to do the others. I'm getting an error with the release signing key download:

$ sq wkd get pierre@archlinux.de > release-key.pgp
error: Found argument 'wkd' which wasn't expected, or isn't valid in this context

USAGE:
    sq [FLAGS] [OPTIONS] <SUBCOMMAND>

For more information try --help

I don't know if I should even bother with
Bootstrap tarball PGP signature
and
BLAKE2b

I'm totally new with archlinux so be gentle please. I'm not an expert.

Thank you for your time!

Last edited by kayegui (2022-12-21 09:55:16)

Offline

#2 2022-12-20 17:10:43

Scimmia
Fellow
Registered: 2012-09-01
Posts: 11,461

Re: [SOLVED] Newbie having iso verification issues

1. Yes
2. Yes, the warning just means there's no chain of trust.
3. No

Offline

#3 2022-12-27 10:38:36

LuX
Member
From: France
Registered: 2010-06-14
Posts: 79

Re: [SOLVED] Newbie having iso verification issues

Hello

I have the exact same problem (same iso, same pgp warning). The Yes/Yes/No answer suggests that it is not important, but for me it seems to prevent any installation. Any help would be appreciated.

I boot from a live USB made from this iso using Ventoy, and try to install Arch on /sdev/sda6 (my swap partition is already /dev/sda2) as follows. I have done exactly these commands (I took pictures to be sure). No error until 'pacstrap...'. I reproduce the output of this last command from photos. Except possible typos, the only changes are:
- One line is truncated (it continues too far on the right). I terminate it with [..].
- I skip the lines after 'Synchronizing package databases' (they look just as usual, with 'core', 'extra', and so on) until the 121 packages are downloaded (without error so far).

# loadkeys fr
# mkfs.ext4 /dev/sda6
# swapon /dev/sda2
# mount /dev/sda6 /mnt
# pacstrap -K /mnt base linux linux-firmware
==> Creating install root at /mnt
gpg: /mnt/etc/pacman.d/gnupg/trustdb.gpg:trustdb created
gpg: no ultimately trusted keys found
gpg: starting migration from earlier GnuPG versions
gpg: porting secret keys from '/mnt/etc/pacmand.d/gnupg/secring.gpg' to gpg-agent
gpg: migration succeeded
==> Generating pacman keyring master key. This may take some time.
gpg: Generating pacman keyring master key...
gpg: directory '/mnt/etc/pacman.d/gnupg/openpgp-revocs.de' created
gpg: revocation certificate stored as '/mnt/etc/pacman.d/gnupg/openpgp-revocs.d/538[..]
gpg: done
==> Updating trust database...
gpg: marginal needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   3  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
==> Installing packages to /mnt
:: Synchronizing packages databases...
[skip lines 'core, 'extra' and so on, and the 121 packages download]
Total (121/121)                                              [#########################################] 100%
(121/121) checking keys in keyring                           [#########################################] 100%
(121/121) checking package integrity                         [#########################################] 100%
error: openssl: signature from "Pierre Schmitz <pierre@archlinux.org>" is marginal trust
:: File /mnt/var/cache/pacman/pkg/openssl-3.0.7-4-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: failed to commit transaction (invalid or corrupted package)
Erros occured, no packages were upgraded.
==> ERROR: Failed to install packages to new root
Pacstrap -K /mnt base linux linux-firmware  47.94s user 37.10s system 10% cpu 13:33.43 total

Thanks.

--- EDIT ---
After the line 'Do you want to delete it? [Y/n]' I didn't do anything: I read this line after the process terminated with error.
--------------

Last edited by LuX (2022-12-27 10:42:26)

Offline

#4 2022-12-27 10:48:15

Head_on_a_Stick
Member
From: London
Registered: 2014-02-20
Posts: 7,679
Website

Re: [SOLVED] Newbie having iso verification issues

LuX wrote:
error: openssl: signature from "Pierre Schmitz <pierre@archlinux.org>" is marginal trust
:: File /mnt/var/cache/pacman/pkg/openssl-3.0.7-4-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: failed to commit transaction (invalid or corrupted package)
Erros occured, no packages were upgraded.
==> ERROR: Failed to install packages to new root

https://bbs.archlinux.org/viewtopic.php?id=282191

So

# pacman -Sy archlinux-keyring

Then proceed. Just don't ever use -Sy in an installed system: https://wiki.archlinux.org/title/System … nsupported

Offline

#5 2022-12-27 11:33:02

LuX
Member
From: France
Registered: 2010-06-14
Posts: 79

Re: [SOLVED] Newbie having iso verification issues

This solved the issue, many thanks!

In view of the numerous posts in the thread that you're pointing to, I do agree with the posts which say that this solution should be mentioned in the wiki. But I'm pretty confident that Arch's developers and community will improve this in the future

Thanks again.

Offline

#6 2022-12-27 11:38:12

Head_on_a_Stick
Member
From: London
Registered: 2014-02-20
Posts: 7,679
Website

Re: [SOLVED] Newbie having iso verification issues

The problem will resolve itself in a few days when the January ISO image is released. Until then it's just a test of competence for any prospective Archers :-)

Offline

#7 2022-12-27 12:55:51

Scimmia
Fellow
Registered: 2012-09-01
Posts: 11,461

Re: [SOLVED] Newbie having iso verification issues

LuX wrote:

I have the exact same problem (same iso, same pgp warning).

I'll just point out that your issue it totally different. It's a totally different error at a totally different time, doing something totally different. It has nothing at all to do with the original post.

Offline

#8 2022-12-28 15:55:41

LuX
Member
From: France
Registered: 2010-06-14
Posts: 79

Re: [SOLVED] Newbie having iso verification issues

Scimmia wrote:

I'll just point out that your issue it totally different. It's a totally different error at a totally different time, doing something totally different. It has nothing at all to do with the original post.

It's very kind of you to point this. Many thanks.

Let me just point that, nevertheless, I was indeed a "Newbie having iso verification issue", since the installation problem that I have reported, seemed to be due to some gpg authentication problem. I browsed the forum for this, and was lead to reproduce exactly the same four steps reported in the initial post, independently, with the same result and WARNING. This is what finally lead me to this thread. And this is the reason why I said that "I have the exact same problem (same iso, same pgp warning)".

Apparently, I did not only have the same problem but ALSO another one. The two problems are "totally different", according to you. They don't seem to by totally unrelated, though. Anyway, sorry if this was misleading.

Offline

#9 2022-12-28 15:58:06

Scimmia
Fellow
Registered: 2012-09-01
Posts: 11,461

Re: [SOLVED] Newbie having iso verification issues

LuX wrote:

I was indeed a "Newbie having iso verification issue"

You weren't verifying the ISO, so....

Offline

Board footer

Powered by FluxBB